fix(constructs): service linked role missing permissions

[richardkeit]

Issue #, if available:

#629

Description of changes:

Adds permission that was required.

Note: Still issues with snapshots raised in #624 & attempted to be fixed #611

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[hickeydh-aws]

Hello @richardkeit,

Thank you for taking the time to create this MR. Our team is reviewing this change and we will get back to you if we have any questions!

[richardkeit]

Hi @hickeydh-aws,

I raised AWS Support case (173084606300187), attaching Cloudtrail logs for evidence of the missing permission.
Raised another case (173101637500383) in a different Organization as it occurred there also.

Also hoping for #611 that I raised to be merged in (first), given there is duplicate of the update snapshots due to issue #624

[hickeydh-aws]

Thank you for the extra context. We will evaluate the above PRs as well.

[richardkeit]

Hi @hickeydh-aws , @erwaxler ,

Can I ask you review this once more?

[erwaxler]

Hey @richardkeit , thanks for following up on this. I'm reviewing this code now and expect to incorporate it into our next public release. I will follow-up if I have any questions during testing, otherwise I will let you know once it has been merged. Thank you this contribution!

[erwaxler]

Hi @richardkeit , thanks again for your contribution! This has been integrated into the code base and will be included in the next minor release. I'll go ahead and close this, thank you for your support of the Landing Zone Accelerator!